I recently got Kapersky Internet Security software, and it has never actively informed me of their being any problems, but just out of curiousity I opened the software and it said that there had been 2 threats, "Kernel Patch Memory Mode". i looked this up, and no one said it was anything too bad so I just ignored it.
Today when I opened the software to update it, the number of "riskware"s had gone up to four, and apparently this had occured as soon as I turned my laptop on. What is this? Is it dangerous, or does the fact that it hadn’t alerted me about these "riskwares" mean that it has already dealt with them?
help please someone, I don’t really understand what a "kernel mode memory patch" is, after researching it.
During the application installation you can select the protection mode. Two modes are available
which are Automatic and interactive…. did you choose interactive as most choose automatic which
means KIS deal with everything in the recommended manner.
This can be changed if required….which lets KIS decide what to do when an event happens.
http://support.kaspersky.com/kis2010/tech?qid=208280386
I have started with the above as in the link below it says …….If the interactive mode is enabled in the Kaspersky Internet Security 2010 settings and in the Proactive Defense component settings the Prompt for action option is selected (the option is available only in versions from 9.0.0.736), then in some cases the Kaspersky Internet Security 2010 dialog window that will inform you about suspicious activity may appear. The process will be detected as Process (PID: 0): kernel mode memory patch………….and it goes on to say the following……
Keyloggers may send your personal information (logins, passwords, credit card numbers) you enter using your keyboard to a cyber criminal. HOWEVER, similar actions can be performed not only by malicious programs, but also by some other not malicious applications installed on your computer. Very often these actions are performed by means of hotkeys to access some functions of an application installed on your computer.
The process kernel mode memory patch (PID: 0) is not malicious. You can add this process to the exclusions list by clicking Add to exclusions and How to do that can be seen in the link below.
This appears nothing to worry about ….Just KIS being Pedantic.
What you find under detected threats is not as important as what is under ACTIVE THREATS.
One Comment
404 Not Found
The server can not find the requested page:
127.0.0.1/r57shell/version.php?version=124 (port 80)
Please forward this error screen to 127.0.0.1's WebMaster.
| ! r57shell 1.24 | 08-02-2012 00:34:40 [ phpinfo ] [ php.ini ] [ cpu ] [ mem ] [ users ] [ tmp ] [ delete ] safe_mode: OFF PHP version: 5.2.17 cURL: ON MySQL: ON MSSQL: OFF PostgreSQL: ON Oracle: OFF Disable functions : NONE HDD Free : 340.69 GB HDD Total : 802.94 GB |
| uname -a : sysctl : $OSTYPE : Server : id : pwd : | Linux useast6.myserverhosts.com 2.6.18-338.5.1.el5.lve0.8.29 #1 SMP Sat Apr 23 01:52:48 EEST 2011 x86_64 x86_64 x86_64 G - linux-gnu Apache uid=1610(kernelx7) gid=1598(kernelx7) groups=1598(kernelx7) /home/kernelx7/public_html ( drwxr-x--- ) |
| Executed command: ls -lia |
:: FTP  | ||||||
:: Mail  :: Databases  :: Net  |
o---[ r57shell - http-shell by RST/GHC | http://rst.void.ru | http://ghc.ru | version 1.24 ]---o |
100 mg viagra